Google Admin Console Settings: Best Practices for Education
Incognito mode settings in the Google Admin Console user and browser settings
Browser history and clear browser history settings in the Google Admin Console
Geolocation setting in the Google Admin Console
External Storage Devices
External storage devices setting in the Google Admin Console
Safe Search and Restricted Mode
SafeSearch and restricted mode setting in the Google Admin Console
This setting prevents Chrome browsers from accessing specific URLs. To configure the policy, enter up to 1,000 URLs on separate lines. Each URL must have a valid hostname (such as google.com), an IP address, or an asterisk (*) in place of the host. The asterisk is a wildcard, representing all hostnames and IP addresses. We recommend blacklisting inappropriate or distracting URLs so students stay focused. For example, to block users from accessing Facebook, type in http://www.facebook.com in the text box.
URL blocking setting in the Google Admin Console
Managed Bookmarks and Bookmark Bar
This setting allows you to push a preset list of bookmarks to users on Chrome on desktop and mobile devices. These bookmarks will appear in a folder on Chrome's bookmark bar. You may want to create bookmarks for your school’s online portal or different websites your students will use often. We recommend enabling the bookmark bar and disabling bookmark editing so that students can’t delete or change the bookmarks you choose.
Bookmark settings in the Google Admin Console
Video input setting in the Google Admin Console
Chrome Safe Browsing settings in the Google Admin Console
Block all other apps and extensions setting in the Google Admin Console
Forced re-enrollment setting in the Google Admin Console
Disabled Device Return Instructions
This setting controls the custom text on the disabled device screen. We recommend you include a return address and contact phone number in your message so that users who see this screen are able to return the device to your school.
Disabled device return instructions in the Google Admin Console
This setting controls whether guest browsing is allowed on managed Chrome devices. If you select “Allow guest mode” (the default), the main sign-in screen lets a person sign in as a guest. If you select “Do not allow guest mode”, a user must sign in using a Google Account or Google Workspace account. When a user signs in using guest mode, your organization's policies are not applied, so we recommend turning this setting off.
Guest mode setting in the Google Admin Console
This setting lets you control which users have permission to sign in to a managed Chrome device. Its default is to Restrict Sign-in to list of users is selected. If the textbox is left empty, any user with a Google Account or Google Workspace account can sign in. However, if you include a list of usernames (domain email separated by commas) in the text box, only the named users can sign in. We recommend filling out the textbox with the wildcard *@yourdomain.com so that only users within your domain can sign-in. This will restrict students from signing in with personal accounts.
Sign-in restriction setting in the Google Admin Console
This setting is on by default and specifies if Chrome devices enrolled in your domain report their current device state. Go to Devices > Chrome Devices and click on the device's serial number to see its details. You can also track recent device users by clicking on the device in your Admin console under Devices > Chrome Devices > Device Serial Number > System activity and troubleshooting. This ensures that you receive reports on the device and can track its usage.
Device reporting setting in the Google Admin Console
The Google Admin console keeps you in charge of your school’s digital domain. With these education best practices for Admin console, you’ll be able to quickly manage your students’ user accounts and devices, so you'll have more time for what’s really important: educating the next generation.
Looking for a comprehensive domain management solution?
Sometimes, the Google Admin console's capabilities are very limited. As a result we created gPanel, a comprehensive management and reporting solution for Google Workspace. Features like advanced user administration and superior domain security make gPanel a critical piece of any efficient Google Workspace domain. gPanel is highly rated not because of price or flash, but because of its simple and powerful functionality.
To get more information, fill out the form linked below or you can start a free trial here! Don't forget, gPanel is available for free to organizations who purchase their Google Workspace licenses through Promevo! What are you waiting for?